panic: runtime error: slice bounds out of range [2:0]

goroutine 185 gp=0xc0006a3a40 m=12 mp=0xc0000b3808 [running]:
panic({0x12d0de0?, 0xc000548d98?})
	bazel-out/k8-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:804 +0x168 fp=0xc000a70bb0 sp=0xc000a70b00 pc=0x4740c8
runtime.goPanicSliceB(0x2, 0x0)
	bazel-out/k8-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:155 +0x74 fp=0xc000a70bf0 sp=0xc000a70bb0 pc=0x438f34
gvisor.dev/gvisor/pkg/abi/linux.(*TpacketHdr).MarshalBytes(0x9ded8ca?, {0xc000167cc0?, 0x21455e0?, 0x48ab1d?})
	bazel-out/k8-fastbuild/bin/pkg/abi/linux/linux_abi_autogen_unsafe.go:19180 +0x233 fp=0xc000a70c10 sp=0xc000a70bf0 pc=0x60f373
gvisor.dev/gvisor/pkg/sentry/socket/netstack/packetmmap.(*Endpoint).marshalFrameHeader(0xc000149408, {{0xc0008671a0, 0xc0008671a0}, 0x2d1}, 0x10, 0x10, 0x2d1, 0xc000867170)
	pkg/sentry/socket/netstack/packetmmap/endpoint.go:446 +0x371 fp=0xc000a70ce8 sp=0xc000a70c10 pc=0xae8451
gvisor.dev/gvisor/pkg/sentry/socket/netstack/packetmmap.(*Endpoint).HandlePacket(0xc000149408, 0x2, 0x0, 0xc00019d680)
	pkg/sentry/socket/netstack/packetmmap/endpoint.go:276 +0x465 fp=0xc000a71310 sp=0xc000a70ce8 pc=0xae6cc5
gvisor.dev/gvisor/pkg/tcpip/transport/packet.(*endpoint).HandlePacket(0xc000784000, 0x0?, 0x0?, 0x0?)
	pkg/tcpip/transport/packet/endpoint.go:489 +0xe9 fp=0xc000a71358 sp=0xc000a71310 pc=0xafb909
gvisor.dev/gvisor/pkg/tcpip/stack.(*nic).DeliverLinkPacket.func2({0x15ca1a0, 0xc000784000})
	pkg/tcpip/stack/nic.go:826 +0x18a fp=0xc000a71408 sp=0xc000a71358 pc=0x9d470a
gvisor.dev/gvisor/pkg/tcpip/stack.(*packetEndpointList).forEach(0xc000866fc0, 0xc000a71498)
	pkg/tcpip/stack/nic.go:147 +0x7c fp=0xc000a71458 sp=0xc000a71408 pc=0x9d121c
gvisor.dev/gvisor/pkg/tcpip/stack.(*nic).DeliverLinkPacket(0xc000041448, 0x0, 0xc00019d400)
	pkg/tcpip/stack/nic.go:841 +0x15f fp=0xc000a714e8 sp=0xc000a71458 pc=0x9d451f
gvisor.dev/gvisor/pkg/tcpip/link/nested.(*Endpoint).DeliverLinkPacket(0x751267?, 0x0, 0xc00019d400)
	pkg/tcpip/link/nested/nested.go:71 +0x7b fp=0xc000a71520 sp=0xc000a714e8 pc=0xb9237b
gvisor.dev/gvisor/pkg/tcpip/link/packetsocket.(*endpoint).DeliverNetworkPacket(0xc000120eb0, 0x0, 0xc00019d400)
	pkg/tcpip/link/packetsocket/packetsocket.go:45 +0x25 fp=0xc000a71548 sp=0xc000a71520 pc=0xb93c65
gvisor.dev/gvisor/pkg/tcpip/link/channel.(*Endpoint).InjectInbound(0xc00011eb40, 0x0, 0xc00019d400)
	pkg/tcpip/link/channel/channel.go:208 +0x6d fp=0xc000a71580 sp=0xc000a71548 pc=0xb975cd
gvisor.dev/gvisor/pkg/tcpip/link/tun.(*Device).Write(0xc00043c8a8, 0xc000866ff0)
	pkg/tcpip/link/tun/device.go:250 +0x566 fp=0xc000a716a0 sp=0xc000a71580 pc=0xb99d06
gvisor.dev/gvisor/pkg/sentry/devices/tundev.(*tunFD).Write(0xc000784184?, {0x15eb580, 0xc00025cc88}, {{0x15e26f8, 0xc00072e008}, {0x0, 0x1, 0x200000000300, 0x2df}, {0x0, ...}}, ...)
	pkg/sentry/devices/tundev/tundev.go:163 +0x2d7 fp=0xc000a71760 sp=0xc000a716a0 pc=0xed2077
gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).Write(0xc00043c840, {0x15eb580, 0xc00025cc88}, {{0x15e26f8, 0xc00072e008}, {0x0, 0x1, 0x200000000300, 0x2df}, {0x0, ...}}, ...)
	pkg/sentry/vfs/file_description.go:682 +0x8b fp=0xc000a717e0 sp=0xc000a71760 pc=0x7dee6b
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.write(0xc00025cc88, 0xc00043c840, {{0x15e26f8, 0xc00072e008}, {0x0, 0x1, 0x200000000300, 0x2df}, {0x0, 0x1}}, ...)
	pkg/sentry/syscalls/linux/sys_read_write.go:347 +0x78 fp=0xc000a71970 sp=0xc000a717e0 pc=0xc222b8
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.Write(0xc00025cc88, 0x200000000000?, {{0xc8}, {0x200000000300}, {0x2df}, {0x200000000180}, {0x1c}, {0x0}})
	pkg/sentry/syscalls/linux/sys_read_write.go:316 +0x1a5 fp=0xc000a71a78 sp=0xc000a71970 pc=0xc21525
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc00025cc88, 0x1, {{0xc8}, {0x200000000300}, {0x2df}, {0x200000000180}, {0x1c}, {0x0}})
	pkg/sentry/kernel/task_syscall.go:143 +0x657 fp=0xc000a71ca8 sp=0xc000a71a78 pc=0xa7b7b7
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc00025cc88, 0x1, {{0xc8}, {0x200000000300}, {0x2df}, {0x200000000180}, {0x1c}, {0x0}})
	pkg/sentry/kernel/task_syscall.go:323 +0x45 fp=0xc000a71d00 sp=0xc000a71ca8 pc=0xa7c925
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc00025cc88, 0x1, {{0xc8}, {0x200000000300}, {0x2df}, {0x200000000180}, {0x1c}, {0x0}})
	pkg/sentry/kernel/task_syscall.go:283 +0x65 fp=0xc000a71d50 sp=0xc000a71d00 pc=0xa7c625
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc0002640b0?)
	pkg/sentry/kernel/task_syscall.go:258 +0x2a5 fp=0xc000a71e28 sp=0xc000a71d50 pc=0xa7c3a5
gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc000902e10?, 0xc00025cc88)
	pkg/sentry/kernel/task_run.go:269 +0xefc fp=0xc000a71f30 sp=0xc000a71e28 pc=0xa71b9c
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc00025cc88, 0xe)
	pkg/sentry/kernel/task_run.go:97 +0x214 fp=0xc000a71fc0 sp=0xc000a71f30 pc=0xa70614
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1()
	pkg/sentry/kernel/task_start.go:412 +0x25 fp=0xc000a71fe0 sp=0xc000a71fc0 pc=0xa7a1c5
runtime.goexit({})
	src/runtime/asm_amd64.s:1700 +0x1 fp=0xc000a71fe8 sp=0xc000a71fe0 pc=0x47d181
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 12
	pkg/sentry/kernel/task_start.go:412 +0xc5